Privacy Notice

Introduction

IDL is committed to protecting your privacy and safeguarding your personal information. We’ll use your personal information in accordance with Data Protection Legislation.

Please read this Privacy Notice and any other privacy notice or fair processing notice we may provide on specific occasions carefully, as it is meant to help you understand what information we collect, why we collect it, and how you can update, manage, export and delete your information. This privacy notice supplements the other notices and is not intended to override them

How can I contact you?

If you have any questions about this privacy policy or data protection generally or you want to exercise your rights, please contact us as follows;

Email us at data@idlsgroup.com

Telephone us on 01524 580 665;

Submit a request via our website contact us form;

Or, if you prefer, write us a letter and post to the following address;

International Dyslexia Learning Solutions Limited, 

Office 4 Lancaster Business Park, 8 Mannin Way, Caton Road, Lancaster, 

Lancashire, LA1 3SW


Who are you?

‘We’/’IDL’ means International Dyslexia Learning Solutions Limited, we are the Controller of the personal data that we collect or hold about you.

What personal information do you collect about me?

We may collect, use, store and/or transfer different kinds of personal data about you depending on our relationship with you, which can include:

normal identification information, such as your full name, date of birth, age, gender, username or similar identifier

contact information, such as your postal address, email address and telephone number

information we collect from you through your use of our website and services, such as your marketing preferences, survey responses and feedback

business contact information, such as your job title and the company you work for and your business contact details

job candidates - in respect of job applications, your CV including details of your education and employment history (and any other information which you may choose to provide to us with your CV)

meeting and events - information you provide to us for the purposes of attending meetings and events, including dietary requirements that may reveal information about your health or religious beliefs

user information - when you visit our website or use our application, we may collect the following information:

  • Which pages you view and which links you follow
  • Your IP address, time zone setting and general location
  • our login data, browser type and version, operating system and platform
  • Any passwords that you use on our website
  • Personal details supplied to any payment system

Aggregated Data - we also collect, use and share aggregated data such as statistical or demographic data, this data can be taken from your personal data but is not personal data as it can’t directly or indirectly reveal your identity.  An example of us using aggregated is when we calculate the percentage of learners gaining a qualification.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Where do you get my personal information from?

We can get your personal information from different sources including:

Information you give to us when you:

  • contact us via telephone, letter or email
  • use our website, online forms, applications, surveys or reports 
  • book any training
  • provide data concerning your marketing preferences
  • enquire about, or applying for, job vacancies
  • enquire about, search or apply for or purchase our products or services
  • take part in discussion boards or other forms of social media
  • give us feedback or contact us
  • provide us with identification
  • network with us

Information we learn about you through our relationship and the way you interact with us:

  • when you use our technology to access our services, for example: your IP address or telephone number, 
  • your login information, browser type and version, time zone setting, browser plugin types and versions, operating system and platform, traffic data, location data and the resources that you access, including the pages of our website that you view, 
  • information about your visit, including the URL clickstream to, though and from our site
  • information about you or your preferences we gather from our interaction with you
  • CCTV footage in which you feature when you visit our premises

Information we receive from others:

  • information we receive from vetted and approved third-party agencies  
  • information we gather from publicly available sources in the public domain
  • we may collect information about you from other sources. This may include information from the learning centre that you have enrolled with provide us with all the personal information we may require in order to assist them to provide the service to you.  In specific instances, we may need to collect additional data for the purposes set out in this Notice.

What happens if I don't give you my personal information?

Where we need to collect personal data because of law or a contract we have with you, if you aren’t able or do not want to provide the data when we need it, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide the application or the service). In this case, we may have to cancel a service you have with us, but we will notify you if this is the case at the time.

Why do you use my personal information and what gives you the right?

We will collect and process personal information about you to enable us to administer products and services, provide you with other related services and manage our relationship with you. Under data protection law, we can only use your personal information if we have a proper reason for doing so, e.g.:

Legitimate interests. We process your personal data for our legitimate business purposes, which include the following:

  • to conduct and manage our business
  • to ensure our website and systems are secure
  • to improve and update our services for the benefit of our clients
  • to let our clients, know about our products or services that we consider may be of interest to them

Wherever we process your personal data for these purposes, we ensure that your interests, rights and freedoms are carefully considered.

Contractual necessity. We use your personal data for the following purposes on the basis that it is necessary for us to provide our services to you:

  • to identify you
  • to respond to your enquiry if you contact us
  • to provide pre-contractual information about our services
  • to provide our services
  • to carry out billing and administration activities
  • to customise our services to you

Accordingly, if you are unable to provide such personal data this may make it difficult or prevent us from providing our services to you.

Compliance with laws. We may use your personal data in order to comply with laws (for example, if we are required to co-operate with a police investigation after a court order ordered us to.

Consent: Normally, we do not use consent as the legal basis for processing your personal data; but sometimes we may have to get your consent to use your personal data such as when we collect and use sensitive information about you or when we want to send you third party direct marketing communications to you via email, letters or phone calls.

You have the right to withdraw consent at any time.

Can you use my Information for anything else?

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Do you use and keep sensitive information about me?

We sometimes use what is known as “special category personal data”. This is sensitive personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership; genetic data and/or biometric data or personal information about health. We only process sensitive personal data where it is necessary for compliance with a legal obligation or the purposes of legal proceedings, we have received you have provided it to us and have explicitly consented to us using it.   

Do you use personal information about Children?

We do not knowingly collect or solicit personal information from anyone under the age of 16 or knowingly allow such persons to provide us with their personal information without verifiable parent or guardian consent.  In the event we learn that we collected personal information from anyone under the age of 16, and do not have a parent or guardian's consent, we will delete that information as quickly as possible. 

Will you share my personal information?

We may share your personal information, where it is lawful to do so, with the following organisations who provide us with assistance in delivering our products, applications or services or where we are legally obliged to share information:

  • other companies within our group and our employees, consultants and agents and our professional advisers, such as lawyers and accountants 
  • our business partners, clients, suppliers and sub-contractors
  • courts of law and government or regulatory authorities 
  • third parties to which we outsource certain services such as couriers, IT systems or software providers, IT support service providers, and document and information storage providers
  • third-party service providers to assist us with client insight analytics, such as Google Analytics
  • other organisations for the purposes of fraud/crime protection and investigation
  • where required as part of any proposed sale, reorganisation, transfer, financial arrangement, asset disposal or other transaction relating to our business and/or business assets
  • anyone else with your permission

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. 
IDL will not sell, rent or lease your personal data to any third party.

Do you share my personal data overseas?

Your information may be transferred to and stored in locations outside the European Economic Area (EEA), including countries that may not have the same level of protection for personal information. 
When we do this, we’ll ensure it has an appropriate level of protection and that the transfer is lawful. We may need to transfer your information in this way to carry out our contract with you, to fulfil a legal obligation, to protect the public interest and/or for our legitimate interests. You can obtain more details of the protection given to your information when it’s transferred outside the EEA by contacting us.  

How do you keep my personal data safe?

We use a range of measures to keep your information safe and secure including maintaining the UK Government's Cyber Essentials standard, encryption and other forms of security. We require our staff and any third parties who carry out any work on our behalf to comply with appropriate compliance standards including obligations to protect any information and applying appropriate measures for the use and transfer of information.

We have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

We do not, however, have any control over what happens between your device and the boundary of our information infrastructure. You should be aware of the many information security risks that exist and take appropriate steps to safeguard your own information. 

Do you use my personal information for Marketing?

We may use your information to provide you with details about our products and services, and also products and services from our partners and other relevant third parties. We may send you marketing messages by post, email, telephone, text, or through social media. You can change your mind on how you receive marketing messages or choose to stop receiving them at any time. 


To make that change, please at unsubscribe@idlsgroup.com describing your preferences or use the ‘unsubscribe’ functionality in the footer of email communications sent to you. If you ask us not to send you marketing, it may take us a short period of time to update our systems and records to reflect your request, during which time you may continue to receive marketing messages. 
If you have opted out from our marketing communications, it is possible that your details may be recaptured through public sources in an unconnected marketing campaign. We will try to make sure this does not happen, but if it does, we are sorry, and we would ask that you opt out again.  

Please note that, even if you choose not to receive this information, we may still use your personal information to provide you with important services communications, including communications in relation to any information on products and services you are contracted with us to provide.

Do you use my personal information for Market Research? 

We may use your information for market research and to identify trends. Market research agencies acting on our behalf may get in touch with you by post, telephone, email or other methods of communication to invite you to take part in research . We won’t invite you to take part in research using a communication method if you’ve asked us not to get in touch that way. 

Any responses that you provide whilst participating in market research will be reported back to us anonymously unless you give us permission for your details to be shared. We may also use your information to invite you to participate in market-research. If we do contact you about market-research, you do not have to participate. If you tell us that you do not want to receive market-research communications, we will respect this.

Do you use Automated individual decision-making?

Any automated decision-making or profiling we undertake is solely for the purpose of tailoring the information which we provide to you. We will not use automated decision-making or profiling to make any decisions which will have a legal effect upon you or otherwise significantly affect you, and you have the right not to be subject to such decisions. If you have any concerns or questions about this right, please contact us.

What are my rights?

You have several rights under data protection laws; the rights available to you depend on our reason for processing your information and include:

Your Right

Details

Right to be informed

We have a legal obligation to provide you with concise, transparent, intelligible and easily accessible information about your personal information and our use of it. We have written this notice to do just that, but if you have any questions or require more specific information, you can get in touch using Contact Us section of the website.

 

Right of access

You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information. In most cases, this will be free of charge, but in some limited circumstances, for example repeated requests for further copies, we may apply an administration fee.

Right to rectification

You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.

Right to erasure

You have the right to ask us to erase your personal information in certain circumstances. We have the right to refuse to comply with a request for erasure if we are processing the personal data for one of the following reasons:

to exercise the right of freedom of expression and information.

to comply with a legal obligation.

to perform a task in the public interest or exercise official authority.

for archiving purposes in the public interest, scientific research, historical research or statistical purposes.

for the exercise or defense of legal claims. 

Right to restriction of processing 

You may ask us to stop processing your personal data. We will still hold the data but will not process it any further. This right is an alternative to the right to erasure. If one of the following conditions applies you may exercise the right to restrict processing:

The accuracy of the personal data is contested.

Processing of the personal data is unlawful.

We no longer need the personal data for processing, but the personal data is required for part of a legal process.

The right to object has been exercised and processing is restricted pending a decision on the status of the processing.

 

Right to object to processing

You have the right to object to processing in certain circumstances. You can also object if the processing is for a task carried out in the public interest, the exercise of official authority vested in you, or your legitimate interests (or those of a third party)

 

Right to data portability

 

The right only applies if we are processing information based on your consent or for the performance of a contract and the processing is automated.

For more information on your rights under the GDPR, see https://ico.org.uk/for-the-public/

How can I exercise my rights?

In most circumstances you do not need to pay any charge for exercising your rights. We have one month to respond to you.  

To exercise your rights or get more information about exercising them contact us, giving us enough information to identify you, e.g. account number, username, registration details; provide us with proof of your identity and address (a copy of your driving licence or passport, and a recent utility or credit card bill); and let us know the information to which your request relates, including any account or reference numbers.

How can I withdraw my consent?

Where consent is the is the basis on which we are processing your personal data, you have the right to withdraw that consent at any time by contacting us

How long do you keep my personal information?  

We will keep your personal data in line with our data retention policy for no longer than is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.  

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

If you apply for a job vacancy (or otherwise send us your CV) we will retain your CV for a period of 3 months while we process your application and appoint an individual. If we are considering you for a different role, we may retain this information for longer than that period with your consent. 

Do you use Cookies?

Our website uses cookies. For more information on which cookies we use and how we use them, please see our Cookie Policy. 

How can I complain to or about you?

We hope that we can resolve any query or concern you raise about our use of your information. So please contact us first and we will try our best to deal with your concerns.

If you remain dissatisfied, you can make a complaint about the way we process your personal information to a supervisory authority, in the EEA state where you normally live where the issue arose or in the United Kingdom.

The supervisory authority in the UK is the Information Commissioner’s Office which may be contacted by clicking here or by calling 0303 123 1113

Links to other websites

Where we provide links to websites of other organisations, this Privacy Notice does not cover how that organisation processes personal information. We do not control such third-party websites and are not responsible for their content or privacy statements. We would encourage you to read the privacy policy of every website you visit

Changes to this document

We keep this document under regular review to make sure it is up to date and accurate.  We encourage you to review this page regularly to identify any updates or changes to our Privacy Notice.  This Privacy Notice was last updated on 01/06/2020.

Why we use your personal information

The below table does not apply to special category personal information, which we will only process with your explicit consent

What we use your personal information for

Our reasons

To provide products and/or services to you

For the performance of our contract with you or to take steps at your request before entering into a contract

Administer your experience of the application and website

 

 

To support learning centres and tutors

 

 

To prevent and detect fraud against you or IDL Services

For our legitimate interests or those of a third party, i.e. to minimise fraud that could be damaging for us and for you

Conducting checks to identify our clients and verify their identity

To comply with our legal and regulatory obligations

Deal with any complaints you may have

 

 

Other processing necessary to comply with professional, legal, and regulatory obligations that apply to our business, e.g. under health and safety regulation or rules issued by our professional regulator

To comply with our legal and regulatory obligations

Gathering and providing information required by or relating to audits, enquiries, or investigations by regulatory bodies

To comply with our legal and regulatory obligations

Ensuring business policies are adhered to, e.g. policies covering security and internet use

For our legitimate interests or those of a third party, i.e. to make sure we are following our own internal procedures so we can deliver the best service to you

Operational reasons, such as improving efficiency, training, and quality control

For our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best service for you

Ensuring the confidentiality of commercially sensitive information

For our legitimate interests or those of a third party, i.e. to protect trade secrets and other commercially valuable information To comply with our legal and regulatory obligations

Statistical analysis to help us manage our business, e.g. in relation to our performance, client base, product and service range or other efficiency measures

For our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best service for you

Administer our website, including troubleshooting problems, analysing statistics, conducting research and tests, and keeping the site secure

 

 

Preventing unauthorised access and modifications to systems

For our legitimate interests or those of a third party, i.e. to prevent and detect criminal activity that could be damaging for us and for you To comply with our legal and regulatory obligations

Updating and enhancing customer records

For the performance of our contract with you or to take steps at your request before entering into a contract To comply with our legal and regulatory obligations For our legitimate interests or those of a third party, e.g. making sure that we can keep in touch with our customers about existing orders and new products

Statutory returns

To comply with our legal and regulatory obligations

Enquire about, or apply for, a job vacancy

Necessary for us to use your personal information as part of the recruitment process, to assess your suitability for a role

 

Ensuring safe working practices, staff administration and assessments

To comply with our legal and regulatory obligations For our legitimate interests or those of a third party, e.g. to make sure we are following our own internal procedures and working efficiently so we can deliver the best service to you

Marketing our services and those of selected third parties to: —existing and former customers; —third parties who have previously expressed an interest in our services; —third parties with whom we have had no previous dealings.

To analyse our products, services, and marketing activity and to carry out market research.

 

For our legitimate interests or those of a third party, i.e. to promote our business to existing and former customers

Process payments

 

 

Credit reference checks via external credit reference agencies

For our legitimate interests or those of a third party, i.e. to ensure our customers are likely to be able to pay for our products and services

External audits and quality checks, e.g. for ISO or Investors in People accreditation and the audit of our accounts

For our legitimate interests or a those of a third party, i.e. to maintain our accreditations so we can demonstrate we operate at the highest standards To comply with our legal and regulatory obligations


Keep up to date